Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1140
 
12-14
Cisco AsyncOS 8.5.5 for Email Security User Guide
 
Chapter 12      Anti-Virus
  How to Configure the Appliance to Scan for Viruses
 lists some common Anti-Virus configuration options. 
Flow Diagram for Anti-Virus Actions
 explains how anti-virus actions and options affect messages processed by the 
appliance. 
Table 12-4
Common Anti-Virus Configuration Options 
Situation
Anti-Virus Configuration
Widespread Virus Outbreak
Any viral message is simply dropped 
from the system with little other 
processing taking place. 
Drop-attachments: NO 
Scanning: Scan-Only 
Cleaned messages: Deliver 
Unscannable messages: DROP message 
Encrypted messages: Send to administrator or quarantine for 
review.
Viral messages: Drop message
Liberal Policy
As many documents as possible are 
sent.
Drop-attachments: YES 
Scanning: Scan and Repair 
Cleaned messages: [VIRUS REMOVED] and Deliver 
Unscannable messages: Forward as attachment 
Encrypted messages: Mark and forward
Viral messages: Quarantine or mark and forward.
More Conservative Policy
Drop-attachments: YES
Scanning: Scan and Repair 
Cleaned messages: [VIRUS REMOVED] and Deliver 
(Archive cleaned messages for a more cautious policy.) 
Unscannable messages: Send notification(s), quarantine, OR drop 
and archive. 
Encrypted messages: Mark and forward OR treat as unscannable
Viral messages: Archive and drop
Conservative with Review
Possible virus messages are sent to 
a quarantine mailbox so that an 
administrator can review the 
content.
Drop-attachments: NO 
Scanning: Scan-Only 
Cleaned messages: Deliver (this action won't normally be taken) 
Unscannable messages: Forward as attachment, 
alt-src-host
, or 
alt-rcpt-to
 actions. 
Encrypted messages: Treat as unscannable
Viral messages: Forward to quarantine or administrator.